Treating AI agents like service accounts for federated query security